SQL injection attack and defense second Edition reading note two--sql blind utilization

Find and Confirm SQL blinds

Forcing a generic error to occur

Injections with side-effect queries such as

MSSQL WAITFOR DELAY ' 0:0:5 '

MySQL sleep ()

Split and Balance

5-7-2

Common SQL Blind scenarios

A generic error page is returned when an error query is submitted, and the correct query returns a page with moderately controlled content

A generic error page is returned when an error query is submitted, and the correct query returns a page that is not controlled by the content.

does not affect when submitting an error query, but may be based on time or other side effects

SQL Blind Technology

Inference Attack Technology

Len () Judging length

SUBSTRING () Extract substring

ASCII () Get character ASCII code

Two-point Search

& Bitwise AND

| Bitwise OR

^ Bitwise XOR OR

ASCII (user (), substring) & 11=11

Time-based technology

MySQL sleep () benchmark ()

SQL injection attack and defense second Edition reading note two--sql blind utilization